Editing Downgrading with NOR flasher

Jump to navigation Jump to search
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
{{warning|content=This page is very old, archaic and only left her for documentative purposes.
missing in this old guide: [[Validating flash dumps]]
Newer proper guide is: [[Downgrading with Hardware flasher]]
}}
== 3.7x Downgrade for PS3 Slim's with NOR ==
== 3.7x Downgrade for PS3 Slim's with NOR ==
If your console has NAND and not NOR, look here : [[Downgrading with NAND flasher]]
=== V1 Dospiedra ===


==== Google translate ====
=== Google translate ===


3.7x Downgrade for Slim's with normal fat and flash
3.7x Downgrade for Slim's with normal fat and flash
Line 19: Line 10:
We need:
We need:


*fat or slim console with updated standards to 3.70 "'''DO NOT TRY TO ANOTHER VERSION'''"
fat or slim console with updated standards to 3.70 "'''DO NOT TRY TO ANOTHER VERSION'''"
*Solution to write and read the rules of the console (or flasher progskeet teensy + +)
Solution to write and read the rules of the console (or flasher progskeet teensy + +)
*hxd program (which I use to edit hex)
hxd program (which I use to edit hex)
*FlowRebuilder v.4.1.3.2
FlowRebuilder v.4.1.3.2
*a beer ('''Here it is important''')
a beer ('''Here it is important''')
*Http://pastebin.com/yuvJ5Leh Downgrade.bin
Http://pastebin.com/yuvJ5Leh Downgrade.bin


First dumped our NOR flash, the file must accurately measure "16,777,216 bytes" neither more nor less Draw out several to be absolutely sure of what you do
First dumped our NOR flash, the file must accurately measure "16,777,216 bytes" neither more nor less Draw out several to be absolutely sure of what you do
Line 44: Line 35:
press control + 820 g write position is that of METLDR
press control + 820 g write position is that of METLDR
right-click on the first line of position 820 to give to "stick type" and so the same way we introduce others to enter the files are:
right-click on the first line of position 820 to give to "stick type" and so the same way we introduce others to enter the files are:
*METLDR: Position "810" size "E960"
METLDR: Position "820" size "EDE0"
*BOOTLOADER_0 Position "FC0000" size "40000"
BOOTLOADER_0 Position "FC0000" size "40000"
*EID: Position "2F000" size "10000"
EID: Position "2F000" size "10000"
*CISD: Position "3F000" size "800"
CISD: Position "3F000" size "800"


then we take the downgrade.bin with saved changes and we put in the option flowrebuilder bytereverse dump and extract rules PROGRAM THIS TIME WE WILL GIVE AN ERROR but is a normal error, if error occurs is that okay done and you create a file named downgrade.bin.REV will be the file you have to enter in the console "flash"
then we take the downgrade.bin with saved changes and we put in the option flowrebuilder bytereverse dump and extract rules PROGRAM THIS TIME WE WILL GIVE AN ERROR but is a normal error, if error occurs is that okay done and you create a file named downgrade.bin.REV will be the file you have to enter in the console "flash"


if all went well to finish writing you kindle the console and will press the button or English ps ps push button '''DO NOT PUSH THE PS BUTTON!!''' apagais the console and put it in factory service mode once this is done we need to the correct file system for the lv2diag of 3.55 jaicrab cfw without reader and a special
if all went well to finish writing you kindle the console and will press the button or English ps ps push button'''NO NOTHING PULSEIS''' apagais the console and put it in factory service mode once this is done we need to the correct file system for the lv2diag of 3.55 jaicrab cfw without reader and a special


lv2diag:
lv2diag:
Line 65: Line 56:
Thanks:
Thanks:


*DiGiTaLAnGeL (Tester with progskeet)
DiGiTaLAnGeL (Tester with progskeet)
*Glevand & mfw builder team (cfw)
Glevand & mfw builder team (cfw)
*NDT (Assistant) is a very good person ;-)
NDT (Assistant) is a very good person ;-)
*JaiCraB (lv2diag without reader)
JaiCraB (lv2diag without reader)
*Robs1 (my guide with the normal flash)
Robs1 (my guide with the normal flash)
*EussNL (his great support in the wiki that I use every day PSDEVWIKI.COM)
EussNL (his great support in the wiki that I use every day PS3DEVWIKI.COM)
*Defyboy (to create psdevwiki)
Defyboy (to create ps3devwiki)
*A whole channel # irc-hispano.org darkps3 for their support and many hours of testing we have hit bastards eh!
A whole channel # irc-hispano.org darkps3 for their support and many hours of testing we have hit bastards eh!
*DemonHades (because if you had not put the cover on your website with the lie that contastes on me, I had not met or uf6667 *DigitalAngel and these two helped me a lot)
DemonHades (because if you had not put the cover on your website with the lie that contastes on me, I had not met or uf6667 DigitalAngel and these two helped me a lot)
 
and finally the people have asked me for a private place to donate paypal button, because here it is:
https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=QJN5EYNQJ6H62


greetings and set aside now will resume my work with the dual nand and dump 3.6x gives me so many problems jejej
greetings and set aside now will resume my work with the dual nand and dump 3.6x gives me so many problems jejej


certainly take the opportunity to put that I advise you not bring forth your console to a store called chipdress because two people will have been contacted to repair the destruction they did on their consoles those that store, BEWARE HE UPDATED THE POSITION THAT WAS WRONG METLDR BY POSITION


update 2 We have made ​​an application to perform the process without using the HEX editor
----
 
[http://www.multiupload.com/AE8W5HADWM transplante v1.rar (431.11 KB)]
 
bytereversed you put your flash in donor and recipient downgrade.bin on ..


If at any time during the OS SALE DISPLAY RED (RSOD) PARAD PROCESS IMMEDIATELY BECAUSE I'M GOING TO GET A PROBLEM WITH THAT Downgrade fixeado V2


----
===Original Spanish text===
 
====Original Spanish text====


Downgrade 3.7x para Slim y fat's con nor flash
Downgrade 3.7x para Slim y fat's con nor flash


Mensajepor dospiedras1973 hace 11 minutos
Mensajepor dospiedras1973 hace 11 minutos
hola a todos , al final lo conseguí tenemos un downgrader para consolas slim esta vez es diferente de como se ha hecho con las consolas fat , lo he conseguido para los dos flashers, Teensy ++ y progskeet , Al turron!
hola a todos , al final lo conseguí tenemos un downgrader para consolas slim esta vez es diferente de como se ha hecho con las consolas fat , yo lo he conseguido por los dos flashers Teensy ++ y progskeet , Al turron!


Necesitamos :
Necesitamos :


*consola slim o fat con nor actualizada a 3.70 "'''NO INTENTAR EN OTRA VERSIÓN'''"
consola slim o fat con nor actualizada a 3.70 "'''NO INTENTAR EN OTRA VERSIÓN'''"
*Solución para poder escribir y leer en la nor de la consola ( flasher teensy ++ o progskeet )
Solución para poder escribir y leer en la nor de la consola ( flasher teensy ++ o progskeet )
*programa hxd ( el que uso yo para editar archivos hex )
programa hxd ( el que uso yo para editar archivos hex )
*FlowRebuilder v.4.1.3.2
FlowRebuilder v.4.1.3.2
*una cerveza fresca ( '''este punto es importante''' )
una cerveza fresca ( '''este punto es importante''' )
*Downgrade.bin http://pastebin.com/yuvJ5Leh
Downgrade.bin http://pastebin.com/yuvJ5Leh


Primero dumpeamos nuestra nor con un flasher , el archivo tiene que medir exactamente "16.777.216 bytes" ni uno mas ni uno menos sacad varios para estar completamente seguros de lo que haceis
Primero dumpeamos nuestra nor con un flasher , el archivo tiene que medir exactamente "16.777.216 bytes" ni uno mas ni uno menos sacad varios para estar completamente seguros de lo que haceis
Line 123: Line 109:
pulsamos control + g escribimos la posición 820 que es la del METLDR
pulsamos control + g escribimos la posición 820 que es la del METLDR
pulsamos boton derecho en la primera linea de la posición 820 y le damos a "pegar escribiendo" y así de la misma manera introducimos los demás , los archivos a introducir son los siguientes :
pulsamos boton derecho en la primera linea de la posición 820 y le damos a "pegar escribiendo" y así de la misma manera introducimos los demás , los archivos a introducir son los siguientes :
*METLDR : Posición "810" tamaño "E960"
METLDR : Posición "820" tamaño "EDE0"
*BOOTLOADER_0 Posición "FC0000" tamaño "40000"
BOOTLOADER_0 Posición "FC0000" tamaño "40000"
*EID : Posición "2F000" tamaño "10000"
EID : Posición "2F000" tamaño "10000"
*cISD : Posición "3F000" tamaño "800"
cISD : Posición "3F000" tamaño "800"


luego cogemos el downgrade.bin con los cambios guardados y lo metemos en el flowrebuilder con la opción bytereverse and extract nor dump ESTA VEZ EL PROGRAMA NOS VA A DAR UN ERROR pero es un error normal es más , si da el error es que está bien hecho y os creará un archivo llamado downgrade.bin.REV que será el archivo que tenemos que introducir en la consola "flash"
luego cogemos el downgrade.bin con los cambios guardados y lo metemos en el flowrebuilder con la opción bytereverse and extract nor dump ESTA VEZ EL PROGRAMA NOS VA A DAR UN ERROR pero es un error normal es más , si da el error es que está bien hecho y os creará un archivo llamado downgrade.bin.REV que será el archivo que tenemos que introducir en la consola "flash"
Line 144: Line 130:
agradecimientos :
agradecimientos :


*DiGiTaLAnGeL (Tester con progskeet)
DiGiTaLAnGeL (Tester con progskeet)
*Glevand & mfw builder team( cfw )
Glevand & mfw builder team( cfw )
*NDT ( Ayudante ) Es muy buena persona ;-)
NDT ( Ayudante ) Es muy buena persona ;-)
*JaiCraB ( lv2diag sin lector )
JaiCraB ( lv2diag sin lector )
*Robs1 ( mi guia con las nor flash)
Robs1 ( mi guia con las nor flash)
*EussNL (su gran apoyo en la wiki que utilizo todos los dias PSDEVWIKI.COM)
EussNL (su gran apoyo en la wiki que utilizo todos los dias PS3DEVWIKI.COM)
*Defyboy (por crear psdevwiki)
Defyboy (por crear ps3devwiki)
*A todo el canal #darkps3 de irc-hispano.org por sus apoyos y tantas horas de pruebas que nos hemos pegado eh cabrones!!!
A todo el canal #darkps3 de irc-hispano.org por sus apoyos y tantas horas de pruebas que nos hemos pegado eh cabrones!!!
*DemonHades ( gracias a que si no hubieras puesto la portada en tu web con la mentira que contastes sobre mí, no hubiera conocido a DigitalAngel ni a uf6667 y estos dos me han ayudado mucho )
DemonHades ( gracias a que si no hubieras puesto la portada en tu web con la mentira que contastes sobre mí, no hubiera conocido a DigitalAngel ni a uf6667 y estos dos me han ayudado mucho )
 
y por ultimo la gente me ha pedido por privado que ponga un boton de paypal para donar , pues aqui lo teneis :
https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=QJN5EYNQJ6H62


saludos y apartir de ahora reanudaré mi trabajo con la dual nand y ese dump de 3.6x que tantos problemas me da jejej
saludos y apartir de ahora reanudaré mi trabajo con la dual nand y ese dump de 3.6x que tantos problemas me da jejej


por cierto aprovecho para poner que os aconsejo que no lleveis vuestra consola a una tienda llamada chipdress , ya van dos personas se han puesto en contacto conmigo para reparar el destrozo que hicieron en sus consolas los de dicha tienda , BEWARE


HE ACTUALIZADO LA POSICION DEL METLDR POR QUE ESTABA MAL PUESTO
----


update 2 Hemos hecho una aplicación para realizar el proceso sin usar el editor HEX
[http://www.multiupload.com/AE8W5HADWM transplante v1.rar (431.11 KB)]
poneis vuestra flash bytereversed en donador y downgrade.bin en receptor ..
SI EN ALGUN MOMENTO DEL PROCESO OS SALE LA PANTALLA ROJA ( RSOD) PARAD INMEDIATAMENTE EL PROCESO YA QUE VOY A SACAR UN DOWNGRADE V2 CON ESE PROBLEMA FIXEADO
----


Source: http://www.elotrolado.net/hilo_downgrade-3-7x-para-slim-y-fat-s-con-nor-flash_1659475
Source: http://www.elotrolado.net/hilo_downgrade-3-7x-para-slim-y-fat-s-con-nor-flash_1659475
=== V1a ===
New improved english guide based on this one: http://www.ps3hax.net/2011/08/noob-tutorial-how-to-downgradeflash-your-ps3-from-firmware-3-70-to-3-55-via-progskeetteensy-and-install-3-55-kmeaw-cfw/
=== V2 Dospiedra ===
==== Google translate ====
New method Downgrade v2 supports all NOR FLASH
Write a new method consisting of 6 patches, this time we will use to edit the dump hxd original of your PS3 (make backup)
steps:
first check if our standards Dump bytereversed, to start patching the original dump.bin file we must first ensure that the beginning of the flash at offset 200 is readable "IFI" if instead you see "FI.I "Your rules need to patch it bytereverse before (a and go back to him to put it in bytereverse the console to be read again" FI.I "when we patched the files and offset's a patch are these
patch1: OFFSET 0C0010
Patch2: OFFSET 7C0010
patch3: OFFSET 80000
patch4: OFFSET A0000
Patch5: OFFSET 40000
patch6: OFFSET 60000
easy, normal and cojemos the patch1 for example, copy content and paste it patch1 0C0010 writing and so the rest (the file size does not vary after the stripe)
the rest of the downgrade is the same as before, factory mode, and pup jaicrab lv2diag nochecks.pup of the previous release.
http://www.multiupload.com/ZJINMAKAEP
https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=7QWF9TNAPVVY4
====Original Spanish text====
Downgrade v2 Nuevo metodo compatible con todas las NOR FLASH
Notapor TwoStone » Mié, 31 Ago 2011, 16:13
Escribo un nuevo metodo que consisten en 6 parches , esta vez vamos a usar hxd para editar el dump original de vuestra ps3 ( haced copia de seguridad )
pasos:
primero revisar si nuestra nor dumpeada está bytereversed , para poder empezar a parchear el archivo dump.bin original primero tenemos que asegurarnos que al principio de la flash en el offset 200 se pueda leer "IFI" si en vez de eso veis "FI.I" vuestra nor necesita bytereverse antes de parchearla ( ay que volver a hacerle bytereverse al meterla en la consola para que se pueda leer nuevamente "FI.I" cuando la tengamos parcheada los archivos y offset's a parchear son estos
patch1 : OFFSET 0C0010
patch2 : OFFSET 7C0010
patch3 : OFFSET 80000
patch4 : OFFSET A0000
patch5 : OFFSET 40000
patch6 : OFFSET 60000
es facil , cojemos la nor y el patch1 por ejemplo , copiamos el contenido de patch1 y lo pegamos escribiendo en 0C0010 y así con el resto , ( el tamaño del archivo no puede variar despues de los parcheos )
el resto del downgrade es igual que antes , factory mode , lv2diag de jaicrab y pup nochecks.pup del anterior release.
http://www.multiupload.com/ZJINMAKAEP
https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=7QWF9TNAPVVY4
----
Source: http://darkconsoles.com/foro/viewtopic.php?f=7&t=16
==== NOR offsets used ====
{|class="wikitable sortable"
|-
! target area !! patch no. !! NOR Offset !! Paste length !! Remarks
|-
| ROS0 || [http://www.multiupload.com/RJVZP6CKZ5 patch1 (7 MB)] || 0x0C0010 || 0x6FFFE0 || version string 3.55
|-
| ROS1 || [http://www.multiupload.com/DGVUPMNDQU patch2 (7 MB)] || 0x7C0010 || 0x6FFFE0 || same as patch1?
|-
| trvk_pkg0 || [http://www.multiupload.com/Z7424DXPLJ patch3 (128 KB)] || 0x80000 || 0x20000 ||
|-
| trvk_pkg1 || [http://www.multiupload.com/74GLX7XFDG patch4 (128 KB)] || 0xA0000 || 0x20000 ||
|-
| trvk_prg0 || [http://www.multiupload.com/HHJ3GDGL7X patch5 (128 KB)] || 0x40000 || 0x20000 ||
|-
| trvk_prg1 || [http://www.multiupload.com/4SP4DIK1ZM patch6 (128 KB)] || 0x60000 || 0x20000 ||
|-
|}
=== V2a ===
Improved english guide by damox based on v2: http://blog.damox.net/?p=6
=== Simplyfied V2 downgrade ===
{|class="wikitable sortable"
|-
! Target area !! Patchfile !! NOR Offset !! Paste length !! Remarks
|-
| ROS0 || [http://www.multiupload.com/RJVZP6CKZ5 patch1 (7 MB)] || 0x0C0010 || 0x6FFFE0 || version string 3.55
|-
| ROS1 || [http://www.multiupload.com/RJVZP6CKZ5 patch1 (7 MB)] || 0x7C0010 || 0x6FFFE0 || SAME as ros0
|-
| trvk_prg0 (0x40000) <br />trvk_prg1 (0x60000)<br />trvk_pkg0 (0x80000) <br />trvk_pkg1 (0xA0000) || [http://www.multiupload.com/MU7JRLE8R1 rvk-040000 (512 KB)] || 0x40000 || 0x80000 || one big patch<br />overlapping several revoke area's
|-
|}
=== downgrade v2 patcher ===
Source: http://www.digitalangel.it/2011/09/release-progskeet-patchers-ps3-nor-downgrade-v2-patchfile/
Just extract the folder “downgrade v2 ProgSkeet” anywhere on your PC.
Open WinSkeet40000/LinuxKeet/iSkeet on your computer.
Create a dump of your 3.70 OFW if you haven’t already done it.
Call it “OFW370.bin” -IT MUST BE A BYTESWAPPED DUMP!-
Open the “Patcher” tab and select “OFW370.bin” as the input file.
Select the progskeet_patch.txt as the patch file.
 
This release is based on the patchset of the downgrade v2 released by dospiedra,
and you should check BYTESWAP while reading NOR and when you flash your downgrade.bin
file back. Go for it :) Now you have a fully working downgrade.bin to flash
{{Hardware Flashers}}<noinclude>[[Category:Main]]</noinclude>
Please note that all contributions to PS3 Developer wiki are considered to be released under the GNU Free Documentation License 1.2 (see PS3 Developer wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To protect the wiki against automated edit spam, we kindly ask you to solve the following hCaptcha:

Cancel Editing help (opens in new window)

Templates used on this page:

Retrieved from "http://www.psdevwiki.com/ps3/Downgrading_with_NOR_flasher"